Lucene search

K
cve[email protected]CVE-2011-0581
HistoryFeb 10, 2011 - 4:00 p.m.

CVE-2011-0581

2011-02-1016:00:32
CWE-20
web.nvd.nist.gov
20
cve-2011-0581
crlf injection
adobe coldfusion
http response splitting

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

7.4 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.0%

Multiple CRLF injection vulnerabilities in Adobe ColdFusion 8.0 through 9.0.1 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified tags.

Affected configurations

NVD
Node
adobecoldfusionMatch8.0
OR
adobecoldfusionMatch8.0.1
OR
adobecoldfusionMatch9.0
OR
adobecoldfusionMatch9.0.1

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

7.4 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.0%

Related for CVE-2011-0581